如何解决“ iptables：该名称没有链/目标/匹配”？ [英] How to fix “iptables: No chain/target/match by that name”?

问题描述

我在linux嵌入式系统上构建并安装了iptables。如果我列出所有规则，则一切正常：

I built and installed iptables on my linux embedded system. If I list all rules, everything works fine:

#iptables --list
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

但是，如果我添加了一条阻止icmp ping的新规则，则会出现以下错误：

But, if I add a new rule to block icmp ping, I'll get the follwing error:

iptables -A INPUT -i eth0 -p icmp --icmp-type any -s 0/0 -d 10.20.3.179 -m state --state NEW,ESTABLISHED,RELATED -j DROP
iptables: No chain/target/match by that name.

如何解决？

推荐答案

链和目标看起来正确，因此必须匹配。确保在内核配置中启用了CONFIG_NETFILTER_XT_MATCH_STATE。

The chain and target look correct, so it must be the match. Make sure CONFIG_NETFILTER_XT_MATCH_STATE is enabled in your kernel config.

这篇关于如何解决“ iptables：该名称没有链/目标/匹配”？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！